okf-refactor
Pass
Audited by Gen Agent Trust Hub on Nov 4, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a local Python script located at
../okf/scripts/validate_okf.pyto validate the generated output bundle. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted documentation, notes, and wikis which may contain embedded instructions that the agent might follow.
- Ingestion points: The
<src>source directory containing notes and documentation as described inSKILL.md. - Boundary markers: Absent; the skill does not provide delimiters or instructions to the agent to disregard instructions found within the source documents.
- Capability inventory: File writing to the
<out>directory and execution of thevalidate_okf.pyPython script. - Sanitization: Absent; the skill does not implement filtering, escaping, or validation of the input content before processing it.
Audit Metadata